![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier: oaeA0c9+oLvArkcvTpuG5ZVAf6//TBZpibC5xR0Ivk0=
Subject key identifier: 88:FF:4D:46:37:C8:4B:3C:6C:78:F1:BF:30:E1:2B:62:B1:BB:81:25
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer: /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial: 019510C799F2BE238FC52B134A69E004AF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number: 145A
Signing time: Sun 16 Feb 2025 22:01:11 +0000
Manifest this update: Sun 16 Feb 2025 22:01:11 +0000
Manifest next update: Mon 17 Feb 2025 22:01:11 +0000
Files and hashes: 1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: O8i8G52ydTo6rIgcaV76McZdUv82pJDALKNWSm7oaCo=)
2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:99:f2:be:23:8f:c5:2b:13:4a:69:e0:04:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Validity
Not Before: Feb 16 22:01:11 2025 GMT
Not After : Feb 17 22:01:11 2025 GMT
Subject: CN=88ff4d4637c84b3c6c78f1bf30e12b62b1bb8125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:2f:5e:c9:32:13:73:aa:7c:ef:1d:43:d4:
4d:62:d1:cf:c1:8a:8c:2d:23:fd:b5:0f:8b:70:05:
1e:0e:2a:4c:14:9c:2c:be:f9:7c:94:a3:8a:41:11:
1c:89:5f:78:87:dd:0f:52:fd:b2:e9:66:75:95:b3:
e6:cf:99:c4:ef:b8:20:7d:f2:99:56:4d:c9:49:0b:
4f:21:ad:8c:4b:09:38:db:f1:93:33:4a:e6:94:28:
f4:a5:88:65:4d:fb:a8:68:47:d2:dd:0c:38:de:cd:
54:63:f3:2c:5e:13:f2:d9:37:bd:70:d7:76:6e:18:
09:2b:12:d7:96:85:92:11:9a:f1:4c:7c:e4:8b:83:
50:cb:bb:a7:04:76:6b:06:3a:cb:a9:db:a4:bc:d9:
ae:06:31:54:2c:2c:f1:17:3f:45:7f:96:a3:1b:0c:
ca:d2:e4:9a:aa:15:b2:cf:c4:33:1d:fa:59:70:48:
4c:70:72:2c:05:0b:ff:22:c6:1e:71:ba:d7:10:76:
e6:0a:29:cc:44:b8:fa:b1:e9:2d:1d:3c:85:79:32:
26:69:52:47:67:38:c7:ac:0e:40:29:3e:9d:d6:97:
0e:5a:1d:ae:b7:0f:04:53:1f:ff:c1:f6:6d:4e:36:
94:ac:f3:39:a4:e5:d4:b8:85:30:8f:f5:fb:38:e1:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:4D:46:37:C8:4B:3C:6C:78:F1:BF:30:E1:2B:62:B1:BB:81:25
X509v3 Authority Key Identifier:
keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:57:28:9e:e0:1b:f9:68:76:e3:2f:15:70:62:ce:d6:0f:
27:29:40:f4:e0:f2:18:15:85:b5:cf:ce:20:71:e5:89:68:1c:
a7:a8:39:32:63:47:dd:20:9f:22:c1:81:c2:9a:0e:08:fb:a7:
36:8e:28:03:33:9c:8d:3c:e5:6d:ba:1c:71:f2:a0:b0:dd:1a:
8d:83:48:4a:a6:98:d9:78:ec:02:22:8b:c2:bf:aa:17:0b:2b:
68:24:e4:c6:7a:b5:93:e8:be:69:cd:6f:f7:c4:b8:92:fc:15:
69:30:0d:e6:6c:b9:2d:a3:7e:2f:4d:58:1a:b6:7e:92:aa:4a:
ee:3d:a2:c5:79:25:27:b8:ed:ae:0d:9d:18:74:1b:65:8e:b5:
d7:05:90:e2:83:f4:9d:51:cc:98:12:c6:66:04:80:17:68:be:
d8:33:82:62:f1:6f:77:17:8e:c8:f9:64:84:32:15:f9:40:d8:
d0:9f:ed:c6:d7:cf:0a:84:2a:70:1e:1b:49:8b:4d:7e:f4:e7:
db:ff:e2:80:eb:51:da:96:8d:3c:82:9c:7b:bb:6e:7d:10:07:
f1:20:d8:8f:45:e2:19:1e:63:1c:e4:c8:3d:5e:71:b4:13:47:
24:e7:b3:2d:3a:04:0e:9c:d8:7c:27:62:d5:a6:8d:cd:a1:40:
58:05:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:46 2025 by rpki-client